Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/712aeaa0-b0ad-3445-a9aa-bc93b0e1a5dc.roa
File:                     712aeaa0-b0ad-3445-a9aa-bc93b0e1a5dc.roa (raw, json)
Hash identifier:          8lgHqs+1buX6Zspnibq0Bw8zIhX0e0Kd0Ha8aBJW4LM=
Subject key identifier:   B4:0F:41:97:3E:B7:FE:78:F1:18:A6:AF:C1:E7:3C:68:B9:CD:89:91
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F432858453FA808DCE9BAD739346276E0
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/712aeaa0-b0ad-3445-a9aa-bc93b0e1a5dc.roa
Signing time:             Mon 18 Mar 2024 13:00:30 +0000
ROA not before:           Mon 18 Mar 2024 13:00:30 +0000
ROA not after:            Sun 16 Jun 2024 13:00:30 +0000
asID:                     3223
IP address blocks:        45.74.7.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 May 2024 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:3f:a8:08:dc:e9:ba:d7:39:34:62:76:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Mar 18 13:00:30 2024 GMT
            Not After : Jun 16 13:00:30 2024 GMT
        Subject: CN=4af91eff-d22f-420f-9a5e-ef738d9d71f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e8:7b:f5:e1:b3:37:5f:b0:6d:56:0b:25:c7:
                    19:ed:6b:33:65:af:f7:73:10:26:f1:8c:47:4d:d8:
                    e1:30:9d:0c:d7:84:7b:3b:75:32:68:10:cb:ef:64:
                    d4:20:b5:ea:b6:d0:3f:d7:a6:49:5d:bd:a1:5b:af:
                    94:14:42:93:30:d5:35:64:b9:41:36:dc:8d:97:7d:
                    76:26:3c:e9:a7:68:71:73:d7:c6:7e:2a:f4:b0:2c:
                    13:b2:57:e2:49:d5:c6:6d:59:60:78:cd:03:3a:ef:
                    6d:66:26:76:7c:93:01:fe:4f:94:ca:fe:ba:ca:66:
                    47:ca:a7:88:62:8f:ea:84:70:eb:88:ba:08:43:af:
                    00:9b:8e:8a:5f:9d:1f:37:94:c6:e2:b3:47:73:83:
                    49:65:5f:03:0a:d5:14:56:ab:3d:7b:77:fa:fd:2b:
                    32:4b:75:43:c5:dd:a7:7a:4b:c9:f9:87:55:7d:2f:
                    8c:dd:85:19:68:07:75:e4:6f:c5:e9:5a:84:74:7e:
                    a2:61:40:ef:d8:77:1f:1e:b0:3e:a6:32:92:79:a8:
                    1e:c1:cc:e8:ea:ad:c3:8a:a1:ab:fa:80:de:3c:2b:
                    c2:a9:d1:62:01:82:3d:77:12:96:ab:85:4d:b3:72:
                    1a:a6:66:f3:06:35:2b:14:ee:f9:48:0a:0f:d5:1c:
                    7f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:0F:41:97:3E:B7:FE:78:F1:18:A6:AF:C1:E7:3C:68:B9:CD:89:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/712aeaa0-b0ad-3445-a9aa-bc93b0e1a5dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.74.7.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:fe:6d:88:9e:93:2b:3a:e0:bf:19:04:c3:b7:01:ce:28:42:
         f6:97:a0:a4:d3:99:5e:70:fb:9f:5a:32:12:67:cb:13:77:20:
         39:d6:72:bd:ea:d4:92:a5:36:c6:27:5b:37:be:2f:1d:bd:84:
         0b:d2:99:ea:6a:e6:6e:4f:ac:9b:41:eb:13:1f:24:1e:45:c5:
         7a:41:3e:eb:f3:2c:4b:d6:56:cf:61:ae:c1:69:6c:c1:40:59:
         41:43:14:09:c2:13:58:22:64:9a:27:19:07:cc:3e:fa:c5:66:
         19:c3:06:e9:6e:86:c0:c3:93:60:a4:cf:bb:05:3d:69:86:33:
         e8:44:a0:73:a7:1e:02:07:38:e8:5e:23:1d:7b:de:0d:76:25:
         88:64:f5:37:29:78:d8:c0:c9:70:a8:6f:00:66:49:d6:bb:75:
         1e:da:fe:32:05:3d:00:76:a3:be:5d:ba:0f:57:48:2e:e4:34:
         72:4a:63:7c:57:83:f4:b3:8c:7d:7a:2e:7a:3a:d0:e6:48:47:
         42:75:2a:fb:fe:c1:c7:96:a3:d3:93:4f:75:f5:10:15:dc:da:
         ab:56:86:07:69:ba:32:bb:66:e8:53:af:b2:01:0e:33:df:a5:
         64:b1:53:4a:a1:9a:66:08:7b:8d:b6:22:e8:e0:dd:6e:18:c7:
         c6:0b:37:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 01:54:18 2024 by rpki-client on console-fra.rpki-client.org